Vulnerabilities > CVE-2014-1408 - Credentials Management vulnerability in Conceptronic C54Apm and C54Apm Firmware

047910
CVSS 7.8 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
NONE
Availability impact
NONE
network
low complexity
conceptronic
CWE-255

Summary

The Conceptronic C54APM access point with runtime code 1.26 has a default password of admin for the admin account, which makes it easier for remote attackers to obtain access via an HTTP request, as demonstrated by stored XSS attacks.

Vulnerable Configurations

Part Description Count
OS
Conceptronic
1
Hardware
Conceptronic
1

Common Weakness Enumeration (CWE)